LXC is prone to a local directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. A local attacker could exploit this vulnerability using directory-traversal characters ('../') to arbitrary file as the root user.